Assigning different authorization to same user based on Query

Hi experts,
I am redefining my issue,
Is there any way i can assign different authorizations to the same user but based on either Query/Workbook.
lets say i have two Analysis authorizations A & B and two Queries X and Y.
If the Query/Workbook is X then Add Authorization A to user ABC.
else if the Query/Workbook is Y then Add authorization B to user ABC.
this is because i have two set of workbooks the same user can access and authorization for these two set is different based on the workbook.
I tried using the auth objects 0TCTWORKBK,0TCTQUERID OR 0TCTQUERY but no success so far.
thank in advance.
Edited by: youmenbi on Feb 12, 2008 1:20 AM
Edited by: youmenbi on Feb 12, 2008 1:31 AM

Hi
We have set same kind of authorizations based on the users. The Cost Center Manager is assigned a role and the authorizations for each of the Report/Layout/Workbook is based on his/her profile...some are Read only, some or Read & Write...etc.
If you go through that route......and assign each of the Reports/Layouts/Workbooks to Users....you may succeed.
I know it is a bit time consuming but that is one alternative we could think of as it addressed seamlessly any changes in CC Managers.
Regards
Srinivas

Similar Messages

  • Assigning different authorizations inside a role to different users

    Hello,
    Could someone please guide me to how can we assign different authorizations (authorizations field values) for an authorization object inside a role to different users; i.e. in the role maintenance transaction (pfcg) after we create a new role and add an authorization object to it, if this authorization object has several authorizations (authorization field values), and if I need to add two users to that role, how can I assign to one user an authorization different from that assigned to the other user ?
    Thank you in advance.
    Best regards.
    Reda Khalifa
    IT Department - Almansour Automotive Group - Egypt

    Hi Reda,
    That documentation complicates the subject slightly as it is talking about principles that are at a lower level than the usual role level.
    We have 1 authorisation object - S_TRVL_BKS
    Authorisations have been created for this object, called S_TRVL_CUS1 and S_TRVL_CUS2
    In this context, an authorisation is an instance of an authorisation object that has been populated with data.
    Before the profile generator you used to create authorisations (auth objects populated with data) and assign them to profiles which are then assigned to users.
    In this example 2 profiles would be needed
    Profile1: S_TRVL_CUS1 and S_TRVL_CUS2
    Profile2: S_TRVL_CUS2
    Miller would be assigned profile1, Meyers would be assigned profile2
    The profile generator allows us to easily build authorisations and profiles and packages them up in a role.  This way, we can assign transactions and authorisation objects into a role, populate the authorisations (which is what we do in the authorisations tab in the role) and automatically create the profile.
    The example in the documentation is still valid because it requires 2 seperate authorisations (and therefore profiles and roles) to be assigned to different people.  Unfortunately this is not explained very well in the documentation.
    I hope that makes sense, roles are static and the permissions that they give do not vary dynamically.   In BW we can use variables to do something similar and to some extent structural authorisations in HR work dynamically however this doesn't apply to R/3 or ECC.  (it can be done in come cases but costs many, many £££/$$$'s)
    Please let me know if you want me to elaborate further on this
    Cheers
    Alex

  • Auth: Restrict Infoobject for Queries differently for the same user

    Hi guys,
    I need to restrict an infoobject differently for some queries (analysis authorization). For example, I need to give full hierarchie access for query 1 to user 1.  But for another query for the same user I need to restrict the hierarchie authorization. Furthermore, both queries are based on the same multi provider. It is not possible to use different multi provider ... the adjustment effort is to high (to many queries).
    I have set up an authorization with rsecadmin
    QUERY1:
    ZHier1     Hyrarchie 1
    ZHier2     Hyrarchie 2
    0TCAACTVT     Activity in Analysis Authorizations
    0TCAIPROV     Authorizations for InfoProvider
    0TCAVALID     Validity of an Authorization
    0TCTQUERY     Query
    -->I added the respective values for the queries, the used multiprovider, hierarchies, etc.
    I have set up the same for QUERY 2 with different Hierarchy and Query values, but it does not work correctly. The user is always authorized for the hierarchie values of both queries.
    Thanks foryour helpin advance!!
    Regards,
    Sven

    Hi Sankar,
    Sorry for the confusion. Lets focus only one hierarchy ... ZHier1. 
    QUERY1:
    ZHier1     -> value: node2
    0TCAACTVT     -> value: 2 & 3
    0TCAIPROV -> value: multiprovider1
    0TCAVALID     -> value: *
    0TCTQUERY     -> value: query1 (based on multiprovider1)
    QUERY2:
    ZHier1     -> value: node2.1 (sub node of node 2)
    0TCAACTVT     -> value: 2 & 3
    0TCAIPROV -> value: multiprovider1
    0TCAVALID     -> value: *
    0TCTQUERY     -> value: query2 (based on multiprovider1)
    But this does not work. When I use query2 in reports the user has access to node2 and not only to node2.1.
    Any idea?
    Thanks again!
    Sven

  • Can Exchange have 2 different mailboxes for same user

    hey guys,
    I need to know whether Exchange 2010/2013 can have two mailboxes for the same user e.g.
    1st mailbox is configured to send and receive emails for: xxxxpride.co.ke and 
    2nd mailbox is configured to send and receive emails for: xxxxsolutions.co.ke
    is this possible? if not how should i go about this scenario?
    will it mean I have to run two different exchange and AD servers which will have a different public IP?

    No you can not have 2 mailbox for one user. Because, mailbox is associated with AD account and you need authentication to send emails.
    In this case you can do  following 
    1. Create a different user account with 2nd email address and Forward that 2nd email to first one. So User is reading 2 email in one mailbox. TO send email from 2nd mailbox assign the send as permission to first account.
    2. Add the Alias email address in your first mailbox. (By doing so) User will recieve the emails for both address but cant send from 2nd email address.
     You can have multiple domains configured to recive and send emails in one exchange server.Yes certainly
    we can create multiple recipient for multiple domains.. Under authoritative domains section of hub transport. External Relay and Internal relay and authoritative domains can be created. you can create email address policies for each domain as well. See the
    link below to understand more.
    http://technet.microsoft.com/en-us/library/aa996314%28v=exchg.150%29.aspx
    UMESH DEUJA MCP,MCTS,MCSA,CCNA

  • Configuring IDM menus for different roles for same user?

    Looking forward to Sun IDM 8.x and Sun Role Manager 4.1 installation. Couple of points before the decision are -
    1. If a user A has two roles R1 and R2 (for Sun IDM) then how does Sun IDM decide how the IDM console should appear (menus etc.) to the user based on whether he's logging in with Role R1 or R2? The login screen doesn't contain any input entry for choosing the role with which to log-in. With that in mind, is it even possible to have multiple roles for same login id? Or does the user have to maintain two seperate login identities?
    2. Same question for Role Manager
    3. Does Sun Role Manager 4.1 provide Roles merging feature?
    Thanks,
    AG

    IDM combines the two roles. So if a user has the two roles and role R1 grants access to menu items 1,2,3 and role R2 grants access to menu items 3,4,5, the user will have access to menu items 1,2,3,4,5. If you want to separate these two roles, you will need two different login users - but what exactly are you trying to achieve there?
    Can't help you with Role Manager, sorry.

  • Assign Task to a specific user based on the value of DDL from the form

    Hello,
    Can any one please advise me on how to assign a task to a specific user based on the value of the drop down list from the form. E.g. user fills the form and before they submit the form they have to select one of the name from the drop down list so the form can go to that person for approval.
    Thanks in advance,
    Han

    I got it works now by using the xpath expression (in workbench) to assign to the selected user from the DDL in the form.

  • Different Acitvities, different CIC Profile, Same user

    Is it possible to grant a user authorization to create a certain transaction type in e.g. CIC profile Z01 and is not authorized to create the same transaction type in e.g. CIC profile Z02?
    I'm facing this problem because my client wants to be able to work in the new-situation and old-situation as well.
    I would really appreciate your help!
    Best regards,
    Joost Goudriaan

    We are using the Winclient but the solution you provided for the Winclint didn't bring the result we wanted.
    I will explain the problem in more detail:
    A user with authorization to create transaction types oooo (Contact) and 0001 (Sales Call) is assigned to 2 different CIC profiles.
    If this user uses the first CIC profile he/she must be able to create both the above mentioned activities. But if this user uses the second CIC profile he/she only must be able to create transaction type 0000.
    Thanks in advance!
    Best Regards,
    Joost Goudriaan
    Message was edited by: Joost Goudriaan

  • How to Pick differant price for same activity based on employee grade?

    Hi,
    My Requirement is -
    1.  We are using Machine -1  for manufacturing purpose. In this machine, There 3 employees who are authorized to work... (Eg. Employee A -Employee B -Employee C)
    2. We have an Activity type for Machine hour. The price given in KP26 is 10$ per hour and assigned it in Work Center.
    3. But Employee A hourly price is 12% &  Employee B hourly price is 10$ -Employee C hourly price is 8$.
    4. Now with the current set up, system is taking 10$ for any of the above employee which is not correct.
    Requirement is - When Employee A works on this machine, system shoule take 12$ per hour and If employee B woks on this machine, system should take 10$ per hours and For Employee C, system should pick 8$ per hour. How to get different activity rate when using different employee?
    Kindly help me how can i configure for this requirement. Please give me some inputs..
    Thanks
    F4N

    hi..
      You can map in the following manner :
                 You creat One WC and define three operation against each Employee and define three activity and plan your rate in KP26 against each activity
                           WORK CENTRE     Machning
                               Activity
      OPRN -1(Emp-A)     A-1
      OPRN-2(Emp-B)     A-2
      OPRN-3(Emp-C)     A-3
         So from operation One system will take hr * rate to calculate cost of oprn of employee and so on....
    Please test and write back for any help.
    kkumar

  • Computer Crashed now can't re-authorize with same user ID

    My computer had ADE installed then crashed and I had to redownload but it won't let me add my adobe ID because it is saying I need to use a user ID not previously used. My Nook is also registered to the old ID, so I need to make them match or it won't allow me to share files between the computer and Nook. What should I do?

    Do you have old DRM books on the Nook that you still want to be able to read?
    If you do want to keep your old books, I'm not sure.  I think ADE invents new messages dynamically to make sure that Adobe DRM is as awkward for users as they can possibly make it.  I haven't had any problems using the same userid on more than one computer; I'm not quite sure what the message means exactly.
    One thing to try is to deregister any user for ADE on the computer (ctrl-shift-D), restart ADE, and try to register again.  ADE may have half-remembered details from pre-crash times.
    Another thing to try is to use an older version of ADE, v1.7.2 (see bottom of note).  It has fewer bugs than ADE2.0, and is less stroppy generally.
    If NOT, then you can
    get yourself a new Adobe Id
    register ADE on the computer with it
    plugin the Nook and deregister the old id (ctrl-alt-E to ADE)
    restart ADE (maybe not needed)
    reregister the Nook: it will now be registered with your new id.
    BUT, that will mean you can no longer read your old DRM books on the Nook.
    ~~~
    Version 1.7.2, it is a little difficult to find, available on Adobe site for Windows and for Mac.
    http://helpx.adobe.com/digital-editions/kb/cant-install-digital-editions.html
    The forum software is sometimes corrupting the link above.  There shouldn't be a blank in 'editio ns.html'.  The following redirects to the same page: http://tinyurl.com/diged172

  • Trying to sync different 700p under same user

    Hello.  Hope someone can help.  My 700p died.  Like the calendar/planner so I bought a used one.  Trying to sync my calendar to the different 700p.  my computer and hot sync are not recongnizing the different phone.  Any hints?
    Post relates to: Treo 700p (Verizon)

    Did you Hard Reset the "new" used phone before trying to sync it?  This should be done, then when you try to sync it after erasing it, choose your original HotSync name and all the data should migrate to the phone from your computer.
    To perform a Hard Reset: (Palm Knowledgebase article #887)
    http://kb.palm.com/wps/portal/kb/common/article/887_en.html
    WyreNut
    I am a Volunteer here, not employed by HP.
    You too can become an HP Expert! Details HERE!
    If my post has helped you, click the Kudos Thumbs up!
    If it solved your issue, Click the "Accept as Solution" button so others can benefit from the question you asked!

  • Need help in setting up Group Policy for same user in local system and Terminal server

    Hi All,
    Currently our remote users are using our network using VPN client over internet.
    They are generally at their home computer and doing VPN as they have to work only in one RDP server for application.
    We actually have a OU created for these RDP users and assign then some strict policy like they can not use any other .exe,they can not user any explorer ,they can not even use windows explorer when they are on RDP they just use one exe of their application.
    Now what my management want is they want their home computers in Domain and want them to login via their same credentials they are using for RDP but they don't want them to restrict in their home computers with any strict policy.
    Now my confusion is how can I configure different policies for same users or same OU.
    Can any one guide me please...

    you can achieve this fairly easily with group policy.
    create an OU and put your remote desktop servers in that OU.
    configure both user and computer policies in a group policy and link it to that ou.
    you need to enable loopback mode - you may want it in merge or replace depending on your other policies you have. Probably replace though I would guess. this is set in the computer configuration > admin templates > system / group policy section.
    now remove the policy you have currently setup for your users on the users OU containing the rdp users. If you want you can move these users back to your main users OU.
    when your users login to the RDP server the settings in the user section of the GPO linked to the RDP Servers OU will apply.
    when the user logs in to their own computer the policies from the user OU and computer OU will apply - but not the more restrictive RDP OU.
    hope that makes sense.
    Regards,
    Denis Cooper
    MCITP EA - MCT
    Help keep the forums tidy, if this has helped please mark it as an answer
    My Blog
    LinkedIn:

  • Same user with administrative rights on all the servers in single domain versus domainadmin as a part of administrator group in all the servers

    same user with administrative rights on all the servers in single domain user as a part of administrator group in all the servers:
    same user is configured as administrator on all the servers in one domain at windows 2003 server. Should this user be made part of domain admin and then this can be set up in the group of administrator for all the servers.
    How this is technically different?
    If same user is set up as an administrator on all the servers in domain, will it have the same access on all the files as a domain admin user?
    dhomya

    If the account is not admin on the domaincontrollers and the account is not member of domain admins or any other privileged AD group, the account has only user privileges on AD and thus cannot perform actions like creating and managing  accounts,
    groups, OUs,policies, sites, ...in other words cannot potentially ruin Active Directory.
    I think that is a pretty big difference.
    In fact, it is bad practice to perform you daily server management with an AD privileged account.
    In regards of file access. The domain administrator will be just an admin, and thus has the privilies assigned to the local admin group, just as any other admin. But if it are different accounts they might be member of different groups assigning different
    privileges. Always be carefull when assuming resulting privileges will be the same.
    MCP/MCSA/MCTS/MCITP

  • Email accounts with same user id

    Hi,
    how can we create 2 different email accounts in different domains with the same user id's . When i try to create an email account with a username thats already exist it shows the message that, 'user already exist'
    Is it not possible to create 2 different accounts with same user id ? please help me to solvwe this issue
    Regards

    She can't. She needs to setup her own AppleID and then create an iCloud account using that.
    You can still continue to share your existing AppleID for iTunes and App Store purchases.

  • TS1398 I am unable to connect to two different wifi at different locations having same name but different passwords

    I am unable to connect to two different wi if at different locations having same user name but different password one is at home other at work

    I was able to do a full reset on the router (pushing the tiny button near the power input). Then ran through the setup process and it started working on my device.

  • Two user with same profile and role having different authorization

    Dear All,
    I have very strange case of authorization . We have a new abap developer in our company . Her profile as copied from an exiting abap developer's profile in Development system. But she don't have authorization for lot of transaction that the existing user have. I checked the profile tabs , role tabs . then done the user compare for all the roles , but of no use.
    I did a compare of the two uses using S_BCE_68001430 and could see is that the existing abap user is having authorization starting with T_PXXXXXXXX that is giving him extra rights. These authorization is not present in any of the existing role he is assigned to (checked using S_BCE_68001396). The authirsaction in the roles start with T-DXXXXXXXX
    Will appreciate if any one can give any input . The problem is i need to assign each authorisation the existing user having manually to the new user.
    regards
    Tony

    Thanks for the mail.
    I check the "Reference User for Additional Rights" -- there is no refernce user assgined.
    I checked the table USR04 the no. of Profle for the two users are diffrent and in the table UST04 also the the existing uer is having addtional profiles.
    I like to add one more point Some of the roles of the  two users are composite roles and both the composite and its orignial roles are included the profile of both users.
    Does any one have idea of the authorisations starting with T_PXXXXXXXX
    regards
    tony
    MANDT BNAME          PROFILE    
    100   CHARLHO        B_LSMW_ALL 
    100   CHARLHO        T-D1780054 
    100   CHARLHO        T-D1780057 
    100   CHARLHO        T-D1780058 
    100   CHARLHO        T-D17800581
    100   CHARLHO        T-D1780075 
    100   CHARLHO        T-D17800751
    100   CHARLHO        T-D1780086 
    100   CHARLHO        T-D17800861
    100   CHARLHO        T-D17800862
    100   CHARLHO        T-D17800863
    100   CHARLHO        T-D17800864
    100   CHARLHO        T-D1780087 
    100   CHARLHO        T-D1780088 
    100   CHARLHO        T-D1780247 
    100   CHARLHO        T-D1780304 
    100   CHARLHO        T-D1781182 
    100   CHARLHO        T_P0920411 
    100   CHARLHO        T_P09204111
    100   CHARLHO        T_P092041110
    100   CHARLHO        T_P09204112
    100   CHARLHO        T_P09204113
    100   CHARLHO        T_P09204114
    100   CHARLHO        T_P09204115
    100   CHARLHO        T_P09204116
    100   CHARLHO        T_P09204117
    100   CHARLHO        T_P09204118
    100   CHARLHO        T_P09204119
    100   TESTUSER2      B_LSMW_ALL 
    100   TESTUSER2      T-D1780054 
    100   TESTUSER2      T-D1780057 
    100   TESTUSER2      T-D1780058 
    100   TESTUSER2      T-D17800581
    100   TESTUSER2      T-D1780075 
    100   TESTUSER2      T-D17800751
    100   TESTUSER2      T-D1780086 
    100   TESTUSER2      T-D17800861
    100   TESTUSER2      T-D17800862
    100   TESTUSER2      T-D17800863
    100   TESTUSER2      T-D17800864
    100   TESTUSER2      T-D1780087 
    100   TESTUSER2      T-D1780088 
    100   TESTUSER2      T-D1780247 
    100   TESTUSER2      T-D1780304 
    100   TESTUSER2      T-D1781182

Maybe you are looking for